Warning: Permanently added '[localhost]:41022' (ECDSA) to the list of known hosts.
2022/10/04 13:33:14 fuzzer started
2022/10/04 13:33:14 dialing manager at localhost:35095
syzkaller login: [   44.907724] cgroup: Unknown subsys name 'net'
[   45.058823] cgroup: Unknown subsys name 'rlimit'
2022/10/04 13:33:30 syscalls: 200
2022/10/04 13:33:30 code coverage: enabled
2022/10/04 13:33:30 comparison tracing: enabled
2022/10/04 13:33:30 extra coverage: enabled
2022/10/04 13:33:30 setuid sandbox: enabled
2022/10/04 13:33:30 namespace sandbox: enabled
2022/10/04 13:33:30 Android sandbox: enabled
2022/10/04 13:33:30 fault injection: enabled
2022/10/04 13:33:30 leak checking: enabled
2022/10/04 13:33:30 net packet injection: enabled
2022/10/04 13:33:30 net device setup: enabled
2022/10/04 13:33:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/04 13:33:30 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/04 13:33:30 USB emulation: enabled
2022/10/04 13:33:30 hci packet injection: enabled
2022/10/04 13:33:30 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930������������������������������������������)
2022/10/04 13:33:30 802.15.4 emulation: enabled
2022/10/04 13:33:30 fetching corpus: 0, signal 0/0 (executing program)
2022/10/04 13:33:31 starting 8 fuzzer processes
13:33:31 executing program 0:
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x2, 0x200, 0x2, 0x5, 0x200, 0xfffffffb})
r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x141200)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x20c, r1, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x1ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x2, 0x3}, {0x3, 0x3}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x4}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x6}, {0x1, 0x7}, {0x4, 0x2}, {0x1, 0xa}, {0x3, 0x2}, {0x1, 0x7}, {0x4, 0x6}, {0x0, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x1, 0x9}, {0x4, 0x9}, {0x5, 0x3}, {0x1, 0x8}, {}, {0x0, 0x7}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x2}, {0x5, 0x8}, {0x2, 0x5}, {0x7, 0xa}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x8}, {0x5, 0x8}, {0x3, 0x3}, {0x1}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x8}, {0x2, 0xa}, {0x7, 0x3}, {0x2, 0xa}, {0x4, 0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x5, 0x9}, {0x5}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0xdef, 0xfe00, 0x9, 0x4, 0x5, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x36, 0x1b, 0x1, 0x9, 0x4, 0x18, 0x48, 0x1, 0xc, 0x4, 0x0, 0x6, 0x1, 0x24, 0x1b, 0x48, 0xc9, 0x5, 0x24, 0xb, 0x18]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x36, 0x16, 0x1, 0x5, 0x12, 0x60, 0x30, 0x1b, 0x4, 0x36, 0x2, 0x0, 0x16]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x8}, {0x0, 0xa}, {0x4, 0x8}, {0x6, 0x1}, {0x2, 0x9}, {0x7, 0x9}, {0x0, 0x5}, {0x4, 0x7}, {0x7, 0x9}, {0x7, 0x5}, {0x1, 0x2}, {0x3, 0x6}, {0x3, 0x6}, {0x1, 0x5}, {0x2, 0x7}, {0x3, 0x3}, {0x1, 0x4}, {0x4, 0x5}, {0x6, 0x9}, {0x3, 0x8}, {0x2}, {0x0, 0x3}, {0x3, 0x4}, {0x6, 0x9}, {0x6, 0xa}, {0x4, 0x7}, {0x5, 0xa}, {0x1, 0x4}, {0x4, 0x2}, {0x5, 0x5}, {0x1, 0x8}, {0x1, 0x6}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0x1}, {}, {0x5, 0x9}, {0x6, 0x9}, {0x6, 0x2}, {0x1, 0xa}, {0x3}, {0x5, 0xa}, {0x7, 0x1}, {0x7, 0x3}, {0x5}, {0x1, 0x7}, {0x4, 0x1}, {0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x45, 0x1, 0x9, 0x4, 0x3, 0x8, 0x200]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x1b, 0x1b, 0x60, 0x30, 0x16, 0x18, 0x3, 0x24, 0x1b, 0xc, 0x3, 0x48, 0x5, 0x6, 0x11, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0xa}, {0x0, 0x9}, {0x4, 0x5}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x1}, {}, {0x4, 0x2}, {0x0, 0x4}, {0x4, 0x4}, {0x7, 0xa}, {0x5, 0x5}, {0x7, 0x7}, {0x3, 0x8}, {0x7, 0x5}, {0x3, 0x8}, {0x3, 0x8}, {0x1, 0x5}, {0x7, 0x7}, {0x4, 0x9}, {0x7}, {0x3}, {0x4, 0x7}, {0x3, 0x4}, {0x1, 0x3}, {0x7, 0x4}, {0x3, 0x7}, {0x1, 0x5}, {0x0, 0x3}, {0x4, 0x9}, {0x7, 0x6}, {0x7, 0x9}, {0x1, 0x1}, {0x7, 0x2}, {0x2, 0x7}, {0x2, 0xa}, {0x1, 0x6}, {0x7, 0x7}, {0x5, 0x1}, {0x4, 0x9}, {0x0, 0x8}, {0x1, 0x3}, {0x6, 0x4}, {0x4, 0xa}, {0x7, 0x6}, {0x3, 0xa}, {0x1, 0xa}, {0x0, 0x7}, {0x7}, {0x1, 0xa}, {0x1, 0x1}, {0x7, 0x2}, {0x5}, {0x7}, {0x1}, {0x5, 0x7}, {0x5, 0x8}, {0x1, 0x2}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0x1}, {0x0, 0x3}, {0x2}, {0x1, 0x6}, {0x4, 0x4}, {0x7, 0xa}, {0x6, 0x5}, {0x7, 0x3}, {0x2, 0x1}, {0x4, 0x8}, {0x2, 0x3}, {0x3, 0x8}, {0x0, 0x4}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x2, 0x5, 0x60, 0x30, 0x5, 0x3, 0x60, 0x18, 0xc, 0x18, 0x24, 0x60, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x80, 0xfffa, 0x401, 0x7fff, 0x0, 0x3, 0x3]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x6, 0x3f, 0x8, 0x1e4, 0x200, 0xcdc3]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0xc, 0xb, 0x46, 0x24, 0x12, 0xc, 0x18, 0x4, 0x30, 0x24, 0xb, 0x36, 0x16, 0x6, 0x18, 0x3, 0xc, 0xb, 0x24, 0x1b, 0x60, 0xc, 0x30, 0xc, 0xb]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x12, 0x6, 0x24, 0x6, 0x4, 0xc, 0x2, 0x65, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x979, 0x6a2, 0x12, 0x7, 0x80, 0x2, 0x8]}}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', <r2=>0x0, 0x4, 0x7f, 0x1, 0x10001, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x7800, 0x4, 0x3}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', <r3=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000500)={'syztnl2\x00', <r4=>0x0, 0x1, 0x20, 0x1, 0xff, {{0x1b, 0x4, 0x3, 0x2, 0x6c, 0x66, 0x0, 0x6, 0x29, 0x0, @multicast2, @local, {[@ssrr={0x89, 0xb, 0x84, [@multicast2, @private=0xa010102]}, @timestamp_addr={0x44, 0x1c, 0xe6, 0x1, 0x1, [{@rand_addr=0x64010102, 0x9}, {@empty}, {@rand_addr=0x64010100, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x37, 0x3, 0x3, [{@broadcast, 0x200}, {@empty, 0x4}, {@remote, 0x4}, {@rand_addr=0x64010102, 0x7fff}]}, @lsrr={0x83, 0xb, 0x26, [@rand_addr=0x64010100, @loopback]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', <r5=>0x0, 0x2f, 0xff, 0x18, 0xffff8000, 0x2e, @mcast2, @local, 0x80, 0x8, 0x40, 0x7fffffff}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip6_vti0\x00', <r6=>0x0, 0x2f, 0x4, 0x81, 0x7fffffff, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8009, 0x20, 0x3, 0xff}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'sit0\x00', <r8=>0x0, 0x2f, 0x1, 0x18, 0x6, 0x20, @dev={0xfe, 0x80, '\x00', 0xc}, @empty, 0x7, 0x7, 0x400, 0x9}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'syztnl2\x00', &(0x7f0000000880)={'gretap0\x00', <r9=>0x0, 0x700, 0x40, 0xffffffff, 0x26, {{0x25, 0x4, 0x3, 0x3, 0x94, 0x65, 0x0, 0x8, 0x29, 0x0, @empty, @local, {[@ssrr={0x89, 0x7, 0xee, [@multicast1]}, @timestamp={0x44, 0x24, 0xe8, 0x0, 0x0, [0x0, 0x6, 0xb20000, 0x5, 0x6, 0x1000, 0x5, 0x612b]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x14, [@multicast2, @private=0xa010102, @empty, @broadcast]}, @timestamp={0x44, 0x14, 0x99, 0x0, 0xa, [0x6, 0x80000001, 0x3f, 0x496b]}, @cipso={0x86, 0xd, 0x1, [{0x2, 0x7, "63f2442379"}]}, @lsrr={0x83, 0xf, 0x3d, [@multicast1, @broadcast, @local]}, @generic={0x89, 0xb, "3e98b3867b1906b891"}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'tunl0\x00', <r10=>0x0, 0x700, 0x80, 0x3, 0x5, {{0x18, 0x4, 0x0, 0x6, 0x60, 0x65, 0x0, 0xa8, 0x2f, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x7, 0xa9, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0xa4, 0x3, 0x5, [{@empty, 0x6}, {@local, 0x1}, {@remote, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x3}]}, @noop, @timestamp={0x44, 0x14, 0xb0, 0x0, 0x6, [0x3ff, 0x5b0b, 0x6, 0x40]}, @noop]}}}}})
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000000a40)={0x9fc, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3c19}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa3}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8, 0x7, 0x6, 0x8}, {0x40, 0xf2, 0x55, 0x2}, {0x7ff, 0x40, 0x6, 0x80}, {0xfff, 0x20, 0x43, 0x5}, {0x1ff, 0x0, 0x6b, 0x20}, {0x3, 0x4, 0xb7, 0x100}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r3}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2fec}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4e4974fc}}}]}}, {{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x20, 0x3f, 0x2}, {0x93b, 0x3, 0x7, 0x800}, {0x4, 0xba, 0x99, 0x3ff}, {0x4000, 0x8, 0x81, 0x3f}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xce19}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb67b}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc5e}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}]}}]}, 0x9fc}, 0x1, 0x0, 0x0, 0x8000}, 0x100)
syz_genetlink_get_family_id$team(&(0x7f00000014c0), 0xffffffffffffffff)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000001500)={0x1, 0x9, 0x7fffffff, 0x4}, &(0x7f0000001540))
ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000001580)={{0x3, 0x1, 0x7f, 0x5, 0x3, 0x6}, 0x3cd, [0x9, 0x400, 0x36a, 0x3, 0xffff, 0x7, 0x9, 0x200, 0x1, 0x1, 0x1, 0x1f, 0xfffffffd, 0x8, 0x7, 0x2, 0x5, 0x3, 0xfffffffd, 0x20, 0x1f, 0xbc01, 0x80, 0x7f, 0x5, 0x10001, 0x7, 0x3, 0x4, 0x87f, 0x200, 0x2, 0x8, 0xfffffffe, 0x2, 0x34f69b6e, 0x1, 0x32caeaf7, 0x6, 0x82, 0x3, 0x8000, 0x80000001, 0xc4e9, 0x4, 0xfff, 0x7, 0x5, 0x5, 0xfffffff7, 0x7, 0x2, 0x10001, 0x5, 0x6, 0x340, 0x30000, 0x80, 0x40, 0x6, 0x9, 0x4b, 0x80000000, 0x800, 0x4, 0x80000000, 0x80, 0x4, 0x2, 0x4, 0xf9, 0xfffff727, 0x8000, 0x6, 0x6, 0x800, 0x0, 0x4, 0x8, 0x3, 0x8000, 0x81, 0xa9, 0x80000001, 0x0, 0x5, 0x8001, 0xfc58, 0x9, 0x0, 0xff, 0x2, 0xfffff000, 0x10000, 0x8, 0xfffffffe, 0x1000, 0x9, 0x5, 0x3ff, 0x3, 0x7fffffff, 0x7, 0xf44, 0x80000000, 0x3, 0x2, 0x6213, 0xffffff55, 0x3, 0x9, 0x1, 0x7f, 0x6, 0x7, 0x80, 0x8, 0xff, 0x5, 0x8, 0x8, 0x7, 0x8, 0x9, 0xc6000000, 0x2, 0x8, 0x3, 0xf403, 0xffffffff, 0x25de, 0x188d, 0xfffffff7, 0x5, 0x8, 0x1f, 0x2, 0x9, 0x1, 0x6, 0x0, 0x10001, 0x1cf1, 0x400, 0xffffffff, 0x9, 0xfff, 0x9, 0x0, 0x0, 0x7, 0x1ff, 0x1000, 0xffff, 0x0, 0x8, 0x0, 0x7fff, 0x200, 0x81, 0x4, 0x9, 0x0, 0x1, 0x10000, 0x4, 0x28b8, 0xb6e, 0x3, 0x8, 0x1, 0x9, 0xeb4d, 0x4, 0x7f, 0x9, 0x7, 0x1, 0x9, 0x8000, 0x800, 0x5, 0x4, 0x4, 0x10001, 0x2, 0x80, 0x8, 0x5, 0xcd, 0x7, 0x8001, 0x81, 0x5dc, 0xffff, 0xffff0001, 0x1, 0x1, 0x400, 0xff, 0x20, 0x3ff, 0x800, 0x6, 0x2000000, 0x4b, 0xffff0000, 0x0, 0xfffffbff, 0x7fff, 0x8, 0xcf6, 0x0, 0x200000, 0x5, 0xafe, 0x8, 0x5, 0x6db3eba8, 0x2, 0xeb9, 0x9, 0x2, 0x7fff, 0x1, 0x1, 0x3ff, 0x40, 0xa1, 0x1, 0xfffffffe, 0xff, 0x8e5a, 0x1, 0x1, 0xa410, 0x8001, 0x5, 0x5, 0x9, 0x7f, 0x4, 0x7, 0x10000, 0xd9, 0x0, 0xff, 0x5, 0x80000000, 0x7f, 0xa38f, 0x3b, 0x6, 0x7221d69d, 0x200, 0x0, 0x6, 0x1000, 0x0, 0x9c, 0x1, 0x9, 0x10000, 0x6, 0x1000, 0x69b4, 0x85, 0x8001, 0x7, 0xfffffffe, 0xec6, 0x6, 0x10000, 0x10001, 0x0, 0xffff, 0x6, 0xfffffff9, 0x8, 0x3, 0x5, 0x1ff, 0x10000, 0x200, 0xb, 0x81, 0x0, 0x3, 0x1, 0x29a66738, 0x3, 0x9cb6, 0x5, 0x17f, 0xff, 0x400, 0x79b0, 0x3ff, 0x58f33883, 0x80000001, 0x10000, 0x9bc63022, 0x8, 0x3e1, 0x8, 0x3cf5f50a, 0x0, 0x8, 0x5, 0x81, 0x8, 0x5b7, 0x7fff, 0x7, 0xfffffffa, 0x8001, 0x17, 0x4, 0x9, 0x0, 0x3ff, 0x0, 0xfffffffc, 0x401, 0x7fff, 0x7, 0x5, 0x5, 0x101, 0x1f4, 0x7fff, 0xff, 0x3, 0x20, 0x21b5, 0x7, 0x1, 0x3, 0x80000001, 0x0, 0x1, 0x1f, 0x1000, 0x7, 0xfffffffe, 0x7, 0xffffffff, 0x93a, 0x1, 0x2cdaf907, 0x101, 0x8, 0x2, 0x80000001, 0x1, 0xffffffff, 0x7, 0x1, 0x8, 0x0, 0x3, 0x9, 0x8, 0xffffffff, 0x81, 0x6, 0x2, 0x10001, 0x81, 0x0, 0x3, 0x1, 0x9, 0x5, 0xfffff801, 0x4, 0x6ec9, 0x5f1, 0x0, 0x3, 0x0, 0x2, 0x1, 0x5, 0xc5, 0x2, 0x2, 0x8, 0x7, 0x0, 0x401, 0x6df, 0x5a6, 0x9, 0x7, 0x4, 0xf317, 0x0, 0xf2c2, 0x4, 0x2, 0x1c2, 0x3, 0x7, 0x40, 0x1, 0x3f, 0x401, 0x10001, 0x6, 0x80, 0x988, 0xff, 0x5, 0x5928, 0x0, 0x1, 0x5, 0x1, 0x4, 0x8001, 0x0, 0xb21f, 0x668, 0x3, 0x213d907b, 0x800, 0x6, 0x5d6, 0x6fe9, 0x1000, 0x8001, 0x4, 0x4, 0x6, 0xffe, 0x7, 0xffff0000, 0x2, 0xfff, 0xd1, 0x80, 0x1, 0x2, 0x80000000, 0x1, 0x8001, 0x4, 0x1ff, 0xb17, 0x5, 0x9, 0x7fff, 0x1f, 0x6, 0x10000, 0xe0, 0xfffffffd, 0x1, 0xfffffffe, 0x7fff, 0x8, 0x400, 0x0, 0x8, 0xece407d9, 0xc335, 0x101, 0x4, 0xcad4, 0x8, 0x2, 0x3, 0x40, 0x373, 0x23d, 0xfffff801, 0x10001, 0xfffffffb, 0x3, 0x2, 0x1f, 0x3f, 0x3, 0x1f, 0x8, 0x106, 0x6, 0x800, 0x1000, 0x100, 0x9, 0x0, 0xfffffff9, 0x5, 0x8, 0x21, 0x2, 0x0, 0x9d, 0x1000, 0xfffff9e1, 0x5, 0x10001, 0xffffffff, 0x2, 0x1, 0x9, 0x7, 0x1ff, 0x0, 0x0, 0x1, 0x72, 0x27d, 0x7f, 0x76a5, 0x4, 0x9af, 0x9, 0x5, 0x7, 0x95, 0x5, 0xfffff001, 0x5, 0x1f, 0x1, 0x200, 0x4, 0x400, 0x1, 0x80000001, 0x8, 0x4, 0x8, 0x4, 0x101, 0x4, 0x400, 0xff, 0x4, 0x9, 0x8001, 0x7, 0x3, 0x3, 0x4, 0x2, 0x3ff, 0x3, 0xfffff800, 0x401, 0x2, 0x10001, 0x1, 0x6a, 0x0, 0xdc, 0x1, 0xc3f, 0x8, 0x4, 0x400, 0x3, 0xfffffc00, 0x6, 0x45f7, 0x5, 0x200, 0x7fff, 0x6, 0xfffffff7, 0x2f6a2f0c, 0x2, 0x4, 0x401, 0x800, 0x47, 0x7, 0x4, 0xa8, 0x1, 0x401, 0x80000001, 0x6, 0x7, 0x2, 0x6, 0x0, 0x1, 0x0, 0x3, 0x5, 0x2f7c, 0x3, 0x9, 0x9d5, 0x40, 0x248, 0x100, 0x80000001, 0xdd, 0x9, 0x9, 0x0, 0x4, 0x0, 0x26a5, 0x5, 0x2, 0xfffffffc, 0x7, 0x0, 0x5, 0x7ff, 0x7, 0x7, 0x7, 0x1, 0x2, 0x2, 0x46f, 0x1b3b, 0x4, 0x4, 0x0, 0x80, 0x6, 0xfffffff7, 0x2, 0x8, 0x6a55, 0xe0, 0x6, 0x1c, 0x7, 0xe1db, 0x14dd, 0x5e, 0x8, 0x7fffffff, 0x5, 0x2, 0xfffffffb, 0x4, 0x5, 0x4, 0x7fff, 0x401, 0x6c85, 0x5, 0x81, 0x80000000, 0x8, 0x6, 0x6, 0x1ff, 0xf54, 0x1, 0x3, 0x4, 0x8, 0x3ff, 0xfffffffc, 0x1, 0x5, 0x3, 0x5, 0x6, 0x7, 0x5, 0x80000000, 0xd389, 0x8, 0x832a, 0x9, 0x6, 0x8001, 0x7, 0x6, 0x7fffffff, 0x20, 0x40, 0xb4cf, 0xd, 0x8, 0x200, 0x57, 0x2, 0xe6e, 0x2c96, 0x80, 0x101, 0x3, 0x0, 0x82ef, 0xc619, 0x7, 0x3b82, 0x3, 0x9, 0xfffff852, 0xffffdaf0, 0x1, 0x1, 0x4, 0xffff, 0x2d1e, 0x200, 0x2, 0xa5, 0x7, 0xc4, 0x401, 0x5, 0x6ca, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x7, 0x0, 0x6, 0xffff, 0xfffff001, 0x9, 0x3, 0x0, 0x6, 0x101, 0x7e, 0xf7, 0x3f, 0x7fffffff, 0x4a, 0x7, 0x5, 0x4, 0x4, 0x7ff, 0x80, 0x6d7, 0x3, 0x3, 0xfffffffe, 0x5, 0x8d92, 0x7, 0x9, 0x80, 0xe, 0x7, 0x81, 0x7e4372a7, 0x8, 0x100, 0xfddc, 0x3f, 0x6, 0xa5, 0x62, 0x1, 0xfff, 0xfffffffa, 0x80000000, 0xf3, 0x8000, 0x95, 0x78b4d7c8, 0x79f1, 0xf9, 0x101, 0x7fffffff, 0x7fffffff, 0x9, 0x5, 0x7, 0x2, 0x101, 0x9, 0x6, 0x3ff, 0x0, 0xfff, 0x8, 0xfffffffb, 0xfff, 0x466, 0x0, 0x85, 0x256a, 0x2, 0x20, 0x1000, 0x0, 0x800, 0xffffffe0, 0x8, 0x9, 0x1, 0xb0, 0x8, 0x2, 0x9, 0x0, 0x10001, 0x8, 0x3, 0x4d1, 0x726, 0x200, 0x1, 0x4, 0x3, 0x20, 0x8, 0x4, 0x1000, 0x8, 0x5, 0x0, 0x2, 0x1fe, 0x9, 0x9, 0xfffffffd, 0x9, 0x5, 0x4, 0x9, 0x10001, 0x40, 0x3, 0x9, 0x13d1, 0x6, 0x8001, 0x8, 0x4, 0x1, 0x1, 0x6, 0xc31, 0x401, 0x8, 0x0, 0x3, 0x80000000, 0x8001, 0x3, 0x3, 0x4, 0x9, 0x20, 0xffff0000, 0x100, 0xccca, 0x4, 0x7fffffff, 0x1000, 0x7, 0x2, 0x2, 0x7fff, 0x3, 0xfffffff8, 0x4, 0x5, 0x5, 0x62, 0xe586, 0x2, 0x9, 0x6, 0xe2a, 0x45b3, 0x1000, 0x5, 0x8, 0x5, 0x6, 0x9, 0x1, 0x2, 0x2, 0xff6e, 0x7f, 0x1, 0x5, 0x10001, 0x3, 0x5000000, 0x3, 0x40, 0x7a4d, 0x80000001, 0x3, 0x7, 0x100, 0x1f, 0x6, 0x3, 0x100, 0x5, 0x4, 0x7, 0x0, 0x101, 0x20, 0x10000, 0x6, 0x10000, 0x3, 0x9, 0x3ff, 0x50, 0x81, 0x3, 0x2, 0x8, 0x1, 0xc9, 0x7, 0x6, 0x7, 0x1, 0x7, 0x5, 0x7, 0x81, 0xfffffffb, 0x2, 0x800, 0x8, 0x7f, 0x80000000, 0x7, 0x2, 0x8, 0x7847, 0x0, 0x5, 0x3, 0x5, 0x6, 0x80000000, 0x0, 0x8000800, 0x1, 0x4, 0xaa, 0x9, 0x8, 0x7, 0x9dc, 0xaca, 0x10001, 0x5, 0x11, 0x80, 0x2, 0x1, 0x1a45, 0x5, 0xc03, 0x1ff, 0x0, 0x20, 0x4, 0x9, 0x4, 0x8679d97, 0x80000000, 0x1, 0x81, 0x5, 0x40, 0x8, 0x400, 0x6, 0x5, 0x80000000, 0x0, 0x7fffffff, 0x5, 0xdf29, 0x7f, 0x80000001, 0x9f, 0x4a, 0x7fff, 0xe7ab, 0x1, 0x6, 0x4, 0x1000, 0x2000, 0xed0c, 0x8000, 0xffffffff, 0x8000000, 0x8001, 0x9, 0x81, 0x7, 0x744, 0x1f, 0x5, 0x0, 0x3, 0x6, 0x7, 0x2, 0x5, 0x5c6, 0x6, 0x80, 0xffffffff, 0x2, 0x780]})
ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f00000025c0)={0x3, 0x2, 0x1, 0x8, 0x7f, 0x18000, 0xff, 0x5, 0x6b9, 0x8, 0x0, 0x9, 0x0, 0x9})
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000002640), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x24, r11, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

13:33:31 executing program 1:
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x3c6a60da45ef6f36, 0xffffffffffffffff, 0x8000000)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x110, 0xffffffffffffffff, 0x10000000)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x10000, 0x200100)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x250040, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x7, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x9)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x6001, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r0, r5, r1, r1], 0x4)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r6, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000041}, 0x80c5)
read$rfkill(r3, &(0x7f0000000340), 0x8)
socketpair(0x8, 0xa, 0x1, &(0x7f0000000380)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000003c0)={0x0, 0x1, 0x3f, 0x0, 0x3}, 0xc)
io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x80000001)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000440)=r5, 0x1)

13:33:31 executing program 4:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r0=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', <r1=>0x0, 0x2f, 0x81, 0x2, 0x4, 0x43, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x1, 0x1, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x450, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r0}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x8001}, 0x20004014)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r1, 0x29, 0x0, 0xff, 0x8000, 0xc0, @local, @dev={0xfe, 0x80, '\x00', 0x13}, 0x0, 0x1, 0x4c}})
r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000880))
r6 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x200800, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000900))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r6)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000009c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffff9, 0x59}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ac0)={'wlan1\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000b40)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40040)
ioctl$RTC_WIE_ON(r6, 0x700f)

13:33:31 executing program 6:
r0 = socket(0x25, 0x5, 0xb722)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x124, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7c}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x15}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}]}]}, 0x124}, 0x1, 0x0, 0x0, 0xc0}, 0x10048805)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x408100, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = io_uring_setup(0x52e1, &(0x7f0000000280)={0x0, 0x3061, 0x20, 0x2, 0x1e2})
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff, r2, r3, r4], 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x80000000, 0x27}}}}, [@key_params=[@NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "2da0631c24d3cbc982ea802868"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a6b1f511c6"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "08a70c6edb84d90959484654a6"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1b, 0x34, @random="dc902ef65d1c20a83d4ce76edcbc65cd0f9ed9c9af0cc9"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x108}, 0x1, 0x0, 0x0, 0x24000845}, 0x4000010)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6_vti0\x00', <r7=>0x0, 0x52, 0xe8, 0x8, 0xffffffff, 0x40, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x30, 0xb24, 0x1f}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000007c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0xc000)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x293}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xcc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r9, 0x4, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xcb7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x232}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c1}, 0x20044c1d)
process_mrelease(r1, 0x0)
syz_io_uring_setup(0x377c, &(0x7f0000000c80)={0x0, 0x6d9, 0x2, 0x2, 0x82, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000d00), &(0x7f0000000d40))

[   61.402478] audit: type=1400 audit(1664890411.906:6): avc:  denied  { execmem } for  pid=287 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:33:31 executing program 7:
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x77}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8aab}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]]}, 0xa8}, 0x1, 0x0, 0x0, 0x40048040}, 0x400c850)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x4)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x104, r0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9b5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x33, 0x12}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x1084)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x800)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1)
sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xda, 0x30}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040084}, 0x90)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000a40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000780)={0x24c, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x57, 0x115, "67d321855c9e36d127d861a508de1059c9c7a0e4b33e6a8ad2808c172859125a3362b5fa21497486f2a171d9a7ed1843f5ead54e8b236d95cd4abc3f1b555433c4f520677e2e4c3c850b833cb640a73daf9bf7"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac01}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}, @NL80211_ATTR_AKM_SUITES={0x2c, 0x4c, [0xfac07, 0xfac0f, 0xfac0e, 0xfac13, 0xfac0f, 0xfac05, 0xfac03, 0xfac14, 0xfac0e, 0xfac12]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @beacon=[@NL80211_ATTR_BEACON_TAIL={0x17d, 0xf, [@measure_req={0x26, 0x23, {0x1f, 0x8, 0x5, "7a6293b9e8a60c6482644cfc09aa6c44c34f58b37f6455460edd9ecf607f8e9e"}}, @random={0x6, 0xf9, "56c8d243ba9e867e071cf5e4848942448f9225150f064d24d113129882d9836109ccd41d5b48f4fcba4811fdf16ef439ebf3283d8cd8c5f0ef79f5a165b60247cb015fe2b369f8e2ffb8253451226f334af02ff41aabce1d7a8a18f3fbfe5ef03e81bc4e01c80959722de041a62c44a75aa864901195a6b0a9f1161376966c7d081fdf03dfe72d95b212fdf653cf3330147d071395304ff7b40b07a430bf9c48aa12d8f0d6517f5fdba8e6b30ffbd5f9c72b48560d676b7423382ea554ce0fe5496cbe0205ca4c438035a3880bae9dd6c0894c9f19a7ab6c4c759ffffaf43411f428a90ae79fc6fab02330d1fa779904be0f24af002733e3bd"}, @channel_switch={0x25, 0x3, {0x0, 0x3, 0x5}}, @prep={0x83, 0x1f, @not_ext={{}, 0x5e, 0x1, @device_b, 0x80000000, "", 0x4, 0x0, @device_a, 0x4}}, @rann={0x7e, 0x15, {{0x1}, 0x6, 0x6, @broadcast, 0x1, 0x100, 0x80000000}}, @rann={0x7e, 0x15, {{0x1, 0x1}, 0x3, 0x8, @device_b, 0xda8, 0x84d0, 0xffffffc0}}, @supported_rates={0x1, 0x3, [{0x13c5cfc33ed6e4ed}, {0x30, 0x1}, {0x24, 0x1}]}]}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x24c}}, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), r1)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40894}, 0x20004004)
ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000d00))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e00)={'syztnl2\x00', &(0x7f0000000d80)={'syztnl1\x00', <r4=>0x0, 0x8, 0x40, 0x5, 0x0, {{0x11, 0x4, 0x2, 0x6, 0x44, 0x65, 0x0, 0xf8, 0x29, 0x0, @private=0x7f, @remote, {[@end, @lsrr={0x83, 0x13, 0x85, [@local, @rand_addr=0x64010101, @broadcast, @empty]}, @lsrr={0x83, 0xb, 0x9e, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x82, 0x11, "555e0cec2d07b3624fca4d678ca10d"}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f40)={'syztnl2\x00', &(0x7f0000000e40)={'gretap0\x00', <r5=>0x0, 0x80, 0x700, 0x8d12, 0xf8, {{0x2a, 0x4, 0x0, 0x7, 0xa8, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast2, @broadcast, {[@noop, @ssrr={0x89, 0x13, 0x54, [@remote, @empty, @private=0xa010101, @multicast1]}, @rr={0x7, 0x7, 0x1e, [@private=0xa010101]}, @timestamp_prespec={0x44, 0x34, 0x2f, 0x3, 0x7, [{@rand_addr=0x64010101, 0x8f2}, {@remote, 0x80000001}, {@remote, 0x1f}, {@broadcast, 0x4}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6dfb}]}, @timestamp_prespec={0x44, 0x24, 0x29, 0x3, 0x6, [{@multicast1}, {@broadcast, 0x40}, {@local, 0x5}, {@empty, 0x40}]}, @ssrr={0x89, 0xb, 0x21, [@loopback, @dev={0xac, 0x14, 0x14, 0x1b}]}, @lsrr={0x83, 0x13, 0x42, [@empty, @remote, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x15}]}]}}}}})
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001280)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001240)={&(0x7f0000000f80)={0x298, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x12d0}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
socketpair(0x26, 0xd3ceb3fcbd7e627a, 0x3, &(0x7f00000012c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001340), r1)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000001500)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001380)={0x108, r7, 0x10e, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x10}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x4000)

13:33:31 executing program 2:
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]})
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xf, 0x6, 0x7)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_VLANID={0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004087}, 0x20000010)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x97d, 0x29}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5fb4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000cd0}, 0x2000080)
waitid(0x2, 0x0, &(0x7f0000000480), 0x20000000, &(0x7f0000000500))
setsockopt$inet6_buf(r1, 0x29, 0x44, &(0x7f00000005c0)="0c444be2a12c6e62f1ed7edcc34aa9b7f2a2d61f63ae21be1054502d296226863e7e74ebacf373272d869c37f8cb15b891994a7ddd68ad73e643790be6c81697ca1b7aa8660eacca1b66a178fac2718c4d157024c8456fad44bd73dd69c08d42b0e750d713f4ed56fdddb01f8eba88298cf2a23869727058f5d0d1a4e5818f39c1b3f0a1", 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000007c0)={'tunl0\x00', &(0x7f00000006c0)={'tunl0\x00', r4, 0x40, 0x8000, 0x8, 0x7b, {{0x34, 0x4, 0x3, 0x15, 0xd0, 0x64, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@lsrr={0x83, 0xb, 0x39, [@multicast1, @remote]}, @ssrr={0x89, 0x27, 0x20, [@remote, @local, @local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x33}]}, @timestamp_prespec={0x44, 0x14, 0x75, 0x3, 0x6, [{@multicast2, 0x3}, {@multicast2, 0x4}]}, @noop, @generic={0x5e, 0x9, "6930901290d30a"}, @rr={0x7, 0x13, 0x1b, [@multicast2, @local, @remote, @broadcast]}, @cipso={0x86, 0x3a, 0xffffffffffffffff, [{0x2, 0xf, "16cd37381963a0ece04f6f4ccd"}, {0x0, 0xc, "0113a860d8c96dbdaf76"}, {0x7, 0xd, "8f71dec8436ca374899c05"}, {0x7, 0xc, "8f2d2f025e040e7ed06f"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x27, [@dev={0xac, 0x14, 0x14, 0x36}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast, @private=0xa010100]}]}}}}})
r5 = socket(0x3, 0x1, 0x40000000)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r5)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r7, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x62}}}}, [@NL80211_ATTR_NOACK_MAP={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x64000000}, 0x8045)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r5)
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000d00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x2bc, r8, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xce, 0x18}}}}, [@crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac02, 0xfac00]}, @NL80211_ATTR_PMK={0x102, 0xfe, "479c38c07b703e426df29396b53da8f29b6b85476747fbce28c0ddd112a42d3950e55ed57b46db741b1427ff41a220701eebe0849869cabb0a653cb7c288bfc0234683d9f6dfc16b2797734bcbaba49a87598e6ff0a6d23f4274a2a186e4046290f37899ad79ba1a393577f6b02ec47fb7611226c5463c0a1133b67ad4b22da0aea867a07cdd6b5b76634541a71a315b8163fbceb54d4eb0faf90db3a0c0b7d0f7203d036424739ebb458e04a8dd9739fa983c98985f3a5f473abe6911900d7cd9c11b1c72a808ac688b4f0fc9152636b2089b53726178cc5f822a7f4239bba1665bb9a3ffaa5aa5be01dac541195bcfd351c243cc0bbad69c2534a632fa"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac06, 0xfac06, 0xfac06, 0xfac09]}, @NL80211_ATTR_AKM_SUITES={0x24, 0x4c, [0xfac0a, 0xfac0a, 0xfac13, 0xfac01, 0xfac0c, 0xfac06, 0xfac11, 0x0]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa00}, @NL80211_ATTR_AKM_SUITES={0x14, 0x4c, [0x0, 0xfac09, 0xfac0d, 0xfac0d]}], @NL80211_ATTR_HE_BSS_COLOR={0x1c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x30}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xb}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x20048021}, 0x10040000)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x38, r6, 0x409, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8a}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x38}}, 0x4000)

13:33:31 executing program 3:
socketpair(0xa, 0x1, 0x401, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24048005)
socketpair(0x29, 0x2, 0xffff, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r3, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x100, 0x3, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000440)={0x3c, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0xf4}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x9c}, @jumbo={0xc2, 0x4, 0x6}]}, 0x28)
r6 = socket(0x1a, 0x4, 0x5)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, r7, 0x106, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008880}, 0x4)
socketpair(0x10, 0x4, 0xa86, &(0x7f0000000640)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x184, r3, 0x700, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x14}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff7}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x17}]}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5e2b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x11}, 0x20000810)
r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000940), 0x86255f560a627f13, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r10)
r11 = socket(0x253b3272e8656c8c, 0x80000, 0xd072)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000980))
getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000009c0)=""/182, &(0x7f0000000a80)=0xb6)

13:33:31 executing program 5:
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x2c})
r0 = socket$inet6(0xa, 0x800, 0x200)
getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=""/12, &(0x7f0000000080)=0xc)
r1 = socket(0xa, 0x2, 0xbb9f)
getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=""/204, &(0x7f00000001c0)=0xcc)
setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000200)="7485152f5a47767681962a5f23ca2de20de3cc68efe9f3d1768bec034af179ed25f6cf38c87c68dac720c3a46080e386660d2e3846dfca9e1bd80d423eca041133c87c7515b59e9ef0ed50543832a2302c8ecf3f2482f8e778db9f1e65b3428c3c573b9eda5057", 0x67)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000280)=0x8)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
sendmsg$inet6(r2, &(0x7f0000000780)={&(0x7f0000000300)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1f}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000340)="15902f31a2c5423a63a39d21caa9177ae1dd9cd3c5f2d2c8e7cd5f3e9b8fd532d3471f61588f46de8be175a4959fb48a92d9f9d11a42dfd2737a0a9f3a79c3dd40633b3bf190b8e2afe1696abbac6f982ba75745635f63a0da783cfeb1d6af6c2ee79cdf38da5c6bc1e18fcc6559c3bba917e4cef164ba87e0afc4c7a3fa7dbd5a7fa55394a3d66ec75ecfe62dc702", 0x8f}, {&(0x7f0000000400)="34a9ebd98314f856f74c6ef7431f589a607198928227fedfb35309f71b9d865002fef2b9626af5a2197c701370ea408eb91af358e2b0eab12fd72c3144ec6db77be1de6cbdb5451315304f0ffac67b618065e469ead5788134e919fe8b32aa5822213e80d89fe4", 0x67}, {&(0x7f0000000480)="ae02a6a648b00688e2772475edac9ade9cfe7bfce4c8d3aced024368625a2a", 0x1f}, {&(0x7f00000004c0)="e5ecedda9e6c5f208bea1da62337be512e03de903b5a8b294964fcfba5d023df260da3e08ce30a6027849fb463595117c3ae88b429928e927725386c4c022ad2ebac80f045d443eb21486a2abddeb9a890ec259d591c73af022e72c410106c729d7d57c6fb748424817a08d0a4f3fd535122308d5a705f8ec610efb76e36b1afb595d8fa9e0eb49940ed4ca9a3beb1ab68676dd4ab2ce80a779b19f6fb98ae815ccd44eec588132213aae16c24afa7cf363b17229b9de65b48cca3bb28bac3307b36655bdc72b016353a1e20db35f4f36f7baa01c78e931cafc99f169d0df6", 0xdf}, {&(0x7f00000005c0)="37bb8ceb9db3958d3d825b0e70023bd84878dc9557229ca76dd425757dbb642f3f70052ae78cdd94c0b0c72eefe942dc394bf6af8f1edf0d214e9ee4c42dca51193aaee7682fc4907fab55e9ccbb24cc0b2ab01b7a9c", 0x56}, {&(0x7f0000000640)="d1cc8bb1b4a6d83eb8e6cc57d0ccdac8d68e17ac414dcc891dc40bc715b30816ca69596d8fdb643445feb2acb98d8d0fe869a5b021fc3057509715b764f6f4f51270df6cc03191856cc94c01187076f158212ae22148e03c303f026d183a1a6689a854956018974f09b4e3064475387d", 0x70}], 0x6, &(0x7f0000000740)=[@hoplimit={{0x14, 0x29, 0x34, 0xffffffff}}, @flowinfo={{0x14, 0x29, 0xb, 0x20}}], 0x30}, 0x800)
r3 = socket(0x10, 0x4, 0x7)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000007c0), 0x4)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0xb1, 0x76, 0x8, 0x77, 0x0, 0x1, 0x608, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x6, 0x7f}, 0x109, 0xfffffffffffffe01, 0x800, 0x3, 0x7, 0x7, 0x4a, 0x0, 0xffffffff, 0x0, 0x7b8bf817}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), r1)
r4 = socket(0x30, 0x3, 0x3b)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), r4)
syz_open_dev$hiddev(&(0x7f0000000900), 0x7fff, 0x0)
ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000940))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000980)={'batadv0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000009c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x44, r5})
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000a00)="898283335cd3e1209682cf67336950cf", 0x10)

[   62.672681] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.679514] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.680374] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.681066] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.682505] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.684762] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.685936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.687926] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   62.688871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.689891] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.691592] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   62.692713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.716112] Bluetooth: hci1: HCI_REQ-0x0c1a
[   62.720138] Bluetooth: hci0: HCI_REQ-0x0c1a
[   62.742971] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   62.743463] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   62.746751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.752264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   62.754088] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.754881] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   62.780304] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   62.782226] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.784095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   62.790534] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   62.791532] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.793965] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   62.795292] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   62.796408] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   62.797536] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   62.798638] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   62.799581] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   62.800729] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   62.801617] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   62.804421] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   62.804705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   62.806647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.808072] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   62.810118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   62.814721] Bluetooth: hci4: HCI_REQ-0x0c1a
[   62.816089] Bluetooth: hci2: HCI_REQ-0x0c1a
[   62.816104] Bluetooth: hci3: HCI_REQ-0x0c1a
[   62.817768] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   62.827397] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   62.828481] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   62.830232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   62.832657] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   62.836446] Bluetooth: hci6: HCI_REQ-0x0c1a
[   62.838606] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   62.843678] Bluetooth: hci7: HCI_REQ-0x0c1a
[   64.741904] Bluetooth: hci1: command 0x0409 tx timeout
[   64.743517] Bluetooth: hci0: command 0x0409 tx timeout
[   64.805145] Bluetooth: hci5: Opcode 0x c03 failed: -110
[   64.869832] Bluetooth: hci4: command 0x0409 tx timeout
[   64.869987] Bluetooth: hci3: command 0x0409 tx timeout
[   64.871609] Bluetooth: hci6: command 0x0409 tx timeout
[   64.873098] Bluetooth: hci7: command 0x0409 tx timeout
[   64.933358] Bluetooth: hci2: command 0x0409 tx timeout
[   66.790859] Bluetooth: hci0: command 0x041b tx timeout
[   66.792360] Bluetooth: hci1: command 0x041b tx timeout
[   66.917133] Bluetooth: hci6: command 0x041b tx timeout
[   66.919256] Bluetooth: hci3: command 0x041b tx timeout
[   66.920583] Bluetooth: hci4: command 0x041b tx timeout
[   66.921867] Bluetooth: hci7: command 0x041b tx timeout
[   66.981205] Bluetooth: hci2: command 0x041b tx timeout
[   68.838101] Bluetooth: hci1: command 0x040f tx timeout
[   68.838143] Bluetooth: hci0: command 0x040f tx timeout
[   68.965201] Bluetooth: hci7: command 0x040f tx timeout
[   68.965766] Bluetooth: hci4: command 0x040f tx timeout
[   68.966974] Bluetooth: hci3: command 0x040f tx timeout
[   68.968293] Bluetooth: hci6: command 0x040f tx timeout
[   69.029071] Bluetooth: hci2: command 0x040f tx timeout
[   69.733100] Bluetooth: hci5: Opcode 0x c03 failed: -110
[   70.885142] Bluetooth: hci1: command 0x0419 tx timeout
[   70.885183] Bluetooth: hci0: command 0x0419 tx timeout
[   71.013306] Bluetooth: hci6: command 0x0419 tx timeout
[   71.013346] Bluetooth: hci3: command 0x0419 tx timeout
[   71.014430] Bluetooth: hci4: command 0x0419 tx timeout
[   71.015662] Bluetooth: hci7: command 0x0419 tx timeout
[   71.077098] Bluetooth: hci2: command 0x0419 tx timeout
[   72.298184] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   72.300900] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   72.304181] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   72.308386] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   72.335314] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   72.349304] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   72.357212] Bluetooth: hci5: HCI_REQ-0x0c1a
[   74.406248] Bluetooth: hci5: command 0x0409 tx timeout
[   76.453102] Bluetooth: hci5: command 0x041b tx timeout
[   78.502225] Bluetooth: hci5: command 0x040f tx timeout
[   80.549067] Bluetooth: hci5: command 0x0419 tx timeout
[  124.714186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  124.717235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  124.718738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  124.720941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  124.722649] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  124.723842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  124.728118] Bluetooth: hci0: HCI_REQ-0x0c1a
[  125.034855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  125.037393] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  125.039060] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  125.041461] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  125.042925] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  125.044348] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  125.049145] Bluetooth: hci1: HCI_REQ-0x0c1a
[  125.144645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  125.156232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  125.158454] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  125.175242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  125.178637] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  125.180043] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  125.184196] Bluetooth: hci2: HCI_REQ-0x0c1a
[  125.206953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  125.207042] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  125.216284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  125.228968] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  125.231107] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  125.232268] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  125.236972] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  125.241976] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  125.243186] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  125.247657] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  125.247796] Bluetooth: hci7: HCI_REQ-0x0c1a
[  125.282334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  125.283350] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  125.288711] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  125.289544] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  125.290235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  125.311722] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  125.312490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  125.316856] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  125.327455] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  125.328363] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  125.329021] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  125.337766] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  125.373348] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  125.384439] Bluetooth: hci6: HCI_REQ-0x0c1a
[  125.384774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  125.398482] Bluetooth: hci4: HCI_REQ-0x0c1a
[  125.412765] Bluetooth: hci3: HCI_REQ-0x0c1a
[  126.757168] Bluetooth: hci0: command 0x0409 tx timeout
[  127.077114] Bluetooth: hci1: command 0x0409 tx timeout
[  127.206294] Bluetooth: hci2: command 0x0409 tx timeout
[  127.270105] Bluetooth: hci7: command 0x0409 tx timeout
[  127.461146] Bluetooth: hci6: command 0x0409 tx timeout
[  127.461189] Bluetooth: hci4: command 0x0409 tx timeout
[  127.462450] Bluetooth: hci3: command 0x0409 tx timeout
[  128.805246] Bluetooth: hci0: command 0x041b tx timeout
[  129.126640] Bluetooth: hci1: command 0x041b tx timeout
[  129.254079] Bluetooth: hci2: command 0x041b tx timeout
[  129.318118] Bluetooth: hci7: command 0x041b tx timeout
[  129.509210] Bluetooth: hci3: command 0x041b tx timeout
[  129.509236] Bluetooth: hci4: command 0x041b tx timeout
[  129.509782] Bluetooth: hci6: command 0x041b tx timeout
[  130.853124] Bluetooth: hci0: command 0x040f tx timeout
[  131.174090] Bluetooth: hci1: command 0x040f tx timeout
[  131.301101] Bluetooth: hci2: command 0x040f tx timeout
[  131.366073] Bluetooth: hci7: command 0x040f tx timeout
[  131.557144] Bluetooth: hci6: command 0x040f tx timeout
[  131.557676] Bluetooth: hci4: command 0x040f tx timeout
[  131.558210] Bluetooth: hci3: command 0x040f tx timeout
[  132.901069] Bluetooth: hci0: command 0x0419 tx timeout
[  133.221628] Bluetooth: hci1: command 0x0419 tx timeout
[  133.349077] Bluetooth: hci2: command 0x0419 tx timeout
[  133.413528] Bluetooth: hci7: command 0x0419 tx timeout
[  133.605111] Bluetooth: hci3: command 0x0419 tx timeout
[  133.605676] Bluetooth: hci4: command 0x0419 tx timeout
[  133.606369] Bluetooth: hci6: command 0x0419 tx timeout
[  135.845178] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  138.461370] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  138.463342] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  138.464793] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  138.469183] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  138.474324] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  138.477352] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  138.531897] Bluetooth: hci5: HCI_REQ-0x0c1a
[  140.581254] Bluetooth: hci5: command 0x0409 tx timeout
[  142.630065] Bluetooth: hci5: command 0x041b tx timeout
[  144.678126] Bluetooth: hci5: command 0x040f tx timeout
[  146.725084] Bluetooth: hci5: command 0x0419 tx timeout
[  186.685791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  186.695549] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  186.696720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  186.699796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  186.701521] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  186.702766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  186.715716] Bluetooth: hci0: HCI_REQ-0x0c1a
[  186.799324] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  186.800910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  186.803648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  186.806917] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  186.814219] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  186.826590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  186.834116] Bluetooth: hci1: HCI_REQ-0x0c1a
[  187.049947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  187.051245] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  187.052376] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  187.054839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  187.056152] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  187.057299] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  187.061844] Bluetooth: hci2: HCI_REQ-0x0c1a
[  187.234836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  187.258756] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  187.263427] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  187.289784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  187.299484] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  187.301063] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  187.324211] Bluetooth: hci6: HCI_REQ-0x0c1a
[  187.749213] INFO: task rcu_gp:3 blocked for more than 142 seconds.
[  187.749904]       Not tainted 6.0.0-rc7-next-20220930 #1
[  187.750413] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  187.751093] task:rcu_gp          state:I stack:30328 pid:3     ppid:2      flags:0x00004000
[  187.752176] Call Trace:
[  187.752809]  <TASK>
[  187.753601]  __schedule+0x893/0x2470
[  187.754547]  ? io_schedule_timeout+0x150/0x150
[  187.755666]  ? do_raw_spin_lock+0x121/0x260
[  187.756722]  ? rwlock_bug.part.0+0x90/0x90
[  187.757774]  schedule+0xda/0x1b0
[  187.758666]  rescuer_thread+0x851/0xdb0
[  187.759935]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.761242]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.762517]  ? lockdep_hardirqs_on+0x79/0x100
[  187.767720]  ? worker_thread+0x1260/0x1260
[  187.768248]  kthread+0x2ed/0x3a0
[  187.768615]  ? kthread_complete_and_exit+0x40/0x40
[  187.769180]  ret_from_fork+0x22/0x30
[  187.772407]  </TASK>
[  187.772649] INFO: task rcu_par_gp:4 blocked for more than 142 seconds.
[  187.773334]       Not tainted 6.0.0-rc7-next-20220930 #1
[  187.773855] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  187.774633] task:rcu_par_gp      state:I stack:30944 pid:4     ppid:2      flags:0x00004000
[  187.779746] Call Trace:
[  187.780026]  <TASK>
[  187.780258]  __schedule+0x893/0x2470
[  187.780631]  ? io_schedule_timeout+0x150/0x150
[  187.781093]  ? do_raw_spin_lock+0x121/0x260
[  187.781537]  ? rwlock_bug.part.0+0x90/0x90
[  187.781931]  schedule+0xda/0x1b0
[  187.782315]  rescuer_thread+0x851/0xdb0
[  187.782679]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.783204]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.783680]  ? lockdep_hardirqs_on+0x79/0x100
[  187.784136]  ? worker_thread+0x1260/0x1260
[  187.784536]  kthread+0x2ed/0x3a0
[  187.784857]  ? kthread_complete_and_exit+0x40/0x40
[  187.785389]  ret_from_fork+0x22/0x30
[  187.785763]  </TASK>
[  187.786055] INFO: task slub_flushwq:5 blocked for more than 142 seconds.
[  187.786639]       Not tainted 6.0.0-rc7-next-20220930 #1
[  187.787178] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  187.788241] task:slub_flushwq    state:I stack:30944 pid:5     ppid:2      flags:0x00004000
[  187.789049] Call Trace:
[  187.789318]  <TASK>
[  187.789540]  __schedule+0x893/0x2470
[  187.789949]  ? io_schedule_timeout+0x150/0x150
[  187.790482]  ? do_raw_spin_lock+0x121/0x260
[  187.790974]  ? rwlock_bug.part.0+0x90/0x90
[  187.791419]  schedule+0xda/0x1b0
[  187.792330]  rescuer_thread+0x851/0xdb0
[  187.793419]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.794790]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.795862]  ? lockdep_hardirqs_on+0x79/0x100
[  187.796354]  ? worker_thread+0x1260/0x1260
[  187.796757]  kthread+0x2ed/0x3a0
[  187.797137]  ? kthread_complete_and_exit+0x40/0x40
[  187.797586]  ret_from_fork+0x22/0x30
[  187.797955]  </TASK>
[  187.798256] INFO: task netns:6 blocked for more than 142 seconds.
[  187.798796]       Not tainted 6.0.0-rc7-next-20220930 #1
[  187.799452] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  187.801790] task:netns           state:I stack:30944 pid:6     ppid:2      flags:0x00004000
[  187.804019] Call Trace:
[  187.804648]  <TASK>
[  187.805249]  __schedule+0x893/0x2470
[  187.806403]  ? io_schedule_timeout+0x150/0x150
[  187.807585]  ? do_raw_spin_lock+0x121/0x260
[  187.808723]  ? rwlock_bug.part.0+0x90/0x90
[  187.809832]  schedule+0xda/0x1b0
[  187.810734]  rescuer_thread+0x851/0xdb0
[  187.811782]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.813029]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.813568]  ? lockdep_hardirqs_on+0x79/0x100
[  187.814082]  ? worker_thread+0x1260/0x1260
[  187.814492]  kthread+0x2ed/0x3a0
[  187.814815]  ? kthread_complete_and_exit+0x40/0x40
[  187.815308]  ret_from_fork+0x22/0x30
[  187.815694]  </TASK>
[  187.816109] INFO: task kworker/0:0H:8 blocked for more than 142 seconds.
[  187.827683]       Not tainted 6.0.0-rc7-next-20220930 #1
[  187.828305] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  187.829103] task:kworker/0:0H    state:I stack:28952 pid:8     ppid:2      flags:0x00004000
[  187.829962] Workqueue:  0x0 (kblockd)
[  187.830431] Call Trace:
[  187.830704]  <TASK>
[  187.830948]  __schedule+0x893/0x2470
[  187.835519]  ? io_schedule_timeout+0x150/0x150
[  187.836063]  schedule+0xda/0x1b0
[  187.836473]  worker_thread+0x15f/0x1260
[  187.836904]  ? process_one_work+0x16a0/0x16a0
[  187.837436]  kthread+0x2ed/0x3a0
[  187.837806]  ? kthread_complete_and_exit+0x40/0x40
[  187.838397]  ret_from_fork+0x22/0x30
[  187.838818]  </TASK>
[  187.839137] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds.
[  187.839853]       Not tainted 6.0.0-rc7-next-20220930 #1
[  187.840469] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  187.841289] task:mm_percpu_wq    state:I stack:30944 pid:10    ppid:2      flags:0x00004000
[  187.842216] Call Trace:
[  187.842495]  <TASK>
[  187.842738]  __schedule+0x893/0x2470
[  187.843177]  ? io_schedule_timeout+0x150/0x150
[  187.843674]  ? do_raw_spin_lock+0x121/0x260
[  187.844175]  ? rwlock_bug.part.0+0x90/0x90
[  187.844632]  schedule+0xda/0x1b0
[  187.845035]  rescuer_thread+0x851/0xdb0
[  187.845488]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.846046]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.846566]  ? lockdep_hardirqs_on+0x79/0x100
[  187.847067]  ? worker_thread+0x1260/0x1260
[  187.847528]  kthread+0x2ed/0x3a0
[  187.848424]  ? kthread_complete_and_exit+0x40/0x40
[  187.849698]  ret_from_fork+0x22/0x30
[  187.850715]  </TASK>
[  188.048659] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds.
[  188.049479]       Not tainted 6.0.0-rc7-next-20220930 #1
[  188.049955] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  188.050855] task:rcu_tasks_kthre state:I stack:29272 pid:11    ppid:2      flags:0x00004000
[  188.051679] Call Trace:
[  188.051915]  <TASK>
[  188.052156]  __schedule+0x893/0x2470
[  188.052544]  ? io_schedule_timeout+0x150/0x150
[  188.052985]  ? mark_held_locks+0x9e/0xe0
[  188.053395]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  188.053852]  schedule+0xda/0x1b0
[  188.054208]  rcu_tasks_one_gp+0x3db/0xc10
[  188.054616]  rcu_tasks_kthread+0x80/0xa0
[  188.054980]  ? rcu_tasks_postscan+0x10/0x10
[  188.055408]  kthread+0x2ed/0x3a0
[  188.055750]  ? kthread_complete_and_exit+0x40/0x40
[  188.056214]  ret_from_fork+0x22/0x30
[  188.056571]  </TASK>
[  188.056795] INFO: task kworker/0:1:12 blocked for more than 143 seconds.
[  188.057400]       Not tainted 6.0.0-rc7-next-20220930 #1
[  188.057868] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  188.058548] task:kworker/0:1     state:I stack:26448 pid:12    ppid:2      flags:0x00004000
[  188.059296] Workqueue:  0x0 (cgroup_destroy)
[  188.059721] Call Trace:
[  188.059950]  <TASK>
[  188.060186]  __schedule+0x893/0x2470
[  188.060534]  ? io_schedule_timeout+0x150/0x150
[  188.060944]  ? rwlock_bug.part.0+0x90/0x90
[  188.061354]  schedule+0xda/0x1b0
[  188.061696]  worker_thread+0x15f/0x1260
[  188.062102]  ? process_one_work+0x16a0/0x16a0
[  188.062517]  kthread+0x2ed/0x3a0
[  188.062843]  ? kthread_complete_and_exit+0x40/0x40
[  188.063325]  ret_from_fork+0x22/0x30
[  188.063750]  </TASK>
[  188.063980] INFO: task kworker/1:0H:21 blocked for more than 143 seconds.
[  188.064621]       Not tainted 6.0.0-rc7-next-20220930 #1
[  188.065137] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  188.065837] task:kworker/1:0H    state:I stack:29760 pid:21    ppid:2      flags:0x00004000
[  188.066636] Workqueue:  0x0 (events_highpri)
[  188.067083] Call Trace:
[  188.067321]  <TASK>
[  188.067579]  __schedule+0x893/0x2470
[  188.067938]  ? io_schedule_timeout+0x150/0x150
[  188.068400]  schedule+0xda/0x1b0
[  188.068760]  worker_thread+0x15f/0x1260
[  188.069173]  ? process_one_work+0x16a0/0x16a0
[  188.069612]  kthread+0x2ed/0x3a0
[  188.069950]  ? kthread_complete_and_exit+0x40/0x40
[  188.070428]  ret_from_fork+0x22/0x30
[  188.070815]  </TASK>
[  188.071064] INFO: task inet_frag_wq:23 blocked for more than 143 seconds.
[  188.071709]       Not tainted 6.0.0-rc7-next-20220930 #1
[  188.072204] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  188.072859] task:inet_frag_wq    state:I stack:30360 pid:23    ppid:2      flags:0x00004000
[  188.073635] Call Trace:
[  188.073886]  <TASK>
[  188.074127]  __schedule+0x893/0x2470
[  188.074481]  ? io_schedule_timeout+0x150/0x150
[  188.074897]  ? do_raw_spin_lock+0x121/0x260
[  188.075333]  ? rwlock_bug.part.0+0x90/0x90
[  188.075776]  schedule+0xda/0x1b0
[  188.076138]  rescuer_thread+0x851/0xdb0
[  188.076535]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  188.077027]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  188.077479]  ? lockdep_hardirqs_on+0x79/0x100
[  188.077936]  ? worker_thread+0x1260/0x1260
[  188.078361]  kthread+0x2ed/0x3a0
[  188.078686]  ? kthread_complete_and_exit+0x40/0x40
[  188.079167]  ret_from_fork+0x22/0x30
[  188.079589]  </TASK>
[  188.079932] 
[  188.079932] Showing all locks held in the system:
[  188.080526] 2 locks held by kworker/u4:0/9:
[  188.081347]  #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0
[  188.083729]  #1: ffff88800861fdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0
[  188.084697] 1 lock held by rcu_tasks_kthre/11:
[  188.085119]  #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10
[  188.086052] 1 lock held by khungtaskd/25:
[  188.086415]  #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260
[  188.087265] 2 locks held by kworker/u4:2/33:
[  188.087733]  #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0
[  188.090643]  #1: ffff8880092d7db0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0
[  188.093357] 1 lock held by kmemleak/54:
[  188.094360] 1 lock held by in:imklog/192:
[  188.095762]  #0: ffff888008d2aae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100
[  188.098474] 3 locks held by kworker/u5:0/303:
[  188.115956]  #0: ffff888028f84938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0
[  188.116856]  #1: ffff88801b5bfdb0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0
[  188.117805]  #2: ffff88802bf11028 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0xd0/0x620
[  188.118595] 3 locks held by kworker/u5:5/312:
[  188.118983]  #0: ffff8880364e2138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0
[  188.119856]  #1: ffff8880363e7db0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0
[  188.120836]  #2: ffff88800ff95028 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0xd0/0x620
[  188.121651] 3 locks held by kworker/u5:7/319:
[  188.122065]  #0: ffff888028408138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0
[  188.122934]  #1: ffff8880364ffdb0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0
[  188.134244]  #2: ffff88802dd81028 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0xd0/0x620
[  188.135109] 2 locks held by kworker/u4:4/329:
[  188.135515]  #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0
[  188.136506]  #1: ffff888036d37db0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0
[  188.137503] 2 locks held by kworker/u4:6/334:
[  188.137904]  #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0
[  188.138874]  #1: ffff888036d97db0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0
[  188.139928] 1 lock held by modprobe/6287:
[  188.140317] 1 lock held by modprobe/6288:
[  188.140714] 1 lock held by modprobe/6289:
[  188.141101] 1 lock held by modprobe/6290:
[  188.141460] 
[  188.141617] =============================================
[  188.141617] 
[  188.773129] Bluetooth: hci0: command 0x0409 tx timeout
[  188.902179] Bluetooth: hci1: command 0x0409 tx timeout
[  189.093138] Bluetooth: hci2: command 0x0409 tx timeout
[  189.157155] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  189.221078] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  189.286081] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  189.350091] Bluetooth: hci6: command 0x0409 tx timeout
[  190.821058] Bluetooth: hci0: command 0x041b tx timeout
[  190.950090] Bluetooth: hci1: command 0x041b tx timeout
[  191.141313] Bluetooth: hci2: command 0x041b tx timeout
[  191.397103] Bluetooth: hci6: command 0x041b tx timeout
[  192.148171] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  192.150510] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  192.161347] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  192.164542] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  192.175294] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  192.178297] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  192.184908] Bluetooth: hci4: HCI_REQ-0x0c1a
[  192.869234] Bluetooth: hci0: command 0x040f tx timeout
[  192.997112] Bluetooth: hci1: command 0x040f tx timeout
[  193.189082] Bluetooth: hci2: command 0x040f tx timeout
[  193.445210] Bluetooth: hci6: command 0x040f tx timeout
[  193.957121] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  194.213085] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  194.214358] Bluetooth: hci4: command 0x0409 tx timeout
[  194.917087] Bluetooth: hci0: command 0x0419 tx timeout
[  195.045080] Bluetooth: hci1: command 0x0419 tx timeout
[  195.238130] Bluetooth: hci2: command 0x0419 tx timeout
[  195.494103] Bluetooth: hci6: command 0x0419 tx timeout
[  196.261147] Bluetooth: hci4: command 0x041b tx timeout
[  196.845702] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  196.847219] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  196.848615] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  196.851379] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  196.853277] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  196.854341] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  196.858303] Bluetooth: hci7: HCI_REQ-0x0c1a

VM DIAGNOSIS:
13:35:39  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffff88802ca5f818 RDX=ffff88802ca5f868
RSI=ffff88802ca5f860 RDI=ffff88802ca5f868 RBP=ffff88802ca5f8c0 RSP=ffff88802ca5f770
R8 =ffffffff85e41d80 R9 =ffffffff85e41d84 R10=ffffed100594bf1a R11=000000000003603d
R12=0000000000000008 R13=ffff88802ca5f8c8 R14=ffff88802ca5f868 R15=ffffffff85e41d85
RIP=ffffffff8111a007 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f43b37f0610 CR3=0000000026d86000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78
YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff
YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000066 R11=0000000000000001
R12=0000000000000066 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0
RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa89ab0f368 CR3=0000000037ae0000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f
YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78
YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d
YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c
YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000